CWE-117
Improper Output Neutralization for Logs
The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
Impactr finds and proves whether CWE-117 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.